Identifying Active HashiCorp Vault Root Tokens
Revoking the root token on a production HashiCorp Vault deployment is one of the recommended best practices for securing an
Read more
Author: mreed
Detecting HashiCorp Vault Root Token Generation
HashiCorp Vault generates a default root token during installation and best practice dictates that the token should be revoked once
Read more
Detecting HashiCorp Vault Root Login
Security of a HashiCorp Vault deployment is of paramount importance given the sensitive nature of the information contained within the
Read more
Puppet Bolt Vault Inventory Plugin
In this blog post we’ll look at the HashiCorp Vault plugin for Puppet Bolt that enables authentication credentials for Bolt
Read more
Puppet Bolt Terraform Inventory Plugin
HashiCorp Terraform is a popular Infrastructure as Code (IaC) tool that is used for provisioning virtual machines or cloud instances
Read more
HashiCorp Packer Puppet Bolt Provisioner
Treating workloads as “cattle” or immutable is a popular management paradigm for stateless workloads and is especially prevalent for such
Read more
Advanced VMware vSphere Template Orchestration
Template management is a critical facet of infrastructure management and traditionally one of the more challenging operations there is. The
Read more
Terraform Puppet Provisioner
HashiCorp Terraform 0.12.2 added official support for a Puppet provisioner. One caveat is that the provisioner is only available in
Read more
The Next Chapter at Puppet
I’m now in my second week at Puppet which is best known for its configuration management software that shares the
Read more
HashiCorp Vault Policy Metrics
I gave a talk for HashiCorp’s HashiDays event earlier this year that centered around operational intelligence for HashiCorp Vault. The
Read moreGetting Started with VMware Harbor
VMware Harbor (https://goharbor.io/) is an open source container registry platform created by VMware. The registry has a number of enterprise
Read moreServerless InSpec using Native Ruby on AWS Lambda
InSpec is a compliance as code tool that helps organizations perform compliance checks in an automated fashion. Last year I
Read more